Running out of file descriptors
jens.rantil at tink.se
Mon Aug 15 11:15:26 CEST 2016
I've been running 2.1.10+dfsg-3ubuntu0.12.04.2 for ~165 days now on a
low-volume machine (~20-30 authentication requests per day). FreeRadius
delegates authentication requests to the PAM (which uses Yubico's PAM
Yesterday, FreeRadius suddenly stopped working. Looking into the issue I
noticed that FreeRadius failed to reload configuration with
Error: Unable to open file "/etc/freeradius/proxy.conf": Too many open
Inspecting open files for the process showed me there were ~1012 open
root at tink-auth-vpn-production:/var/log# lsof|grep freerad|grep
Looks like a classic file resource leak. After restarting the process, no
new /dev/urandom file resources are open. Making two authentication
requests opens up two /dev/urandom. I'm fairly new to FreeRadius. Should I
expect /dev/urandom file descriptors to be pooled between requests? Or
should they be closed between requests? Anyone with input whether this is a
bug in FreeRadius or simply a misconfiguration on my part?
Also, let me know if you'd like me to debug this further.
Backend Developer @ Tink
Tink AB, Wallingatan 5, 111 60 Stockholm, Sweden
For urgent matters you can reach me at +46-708-84 18 32.
More information about the Freeradius-Users